Logo
componentid3lib
Name
id3lib
Version
3.8.3
Type
library
Description
Library for interacting with ID3 tags
Licenses
LGPL-2.0-or-later
PURL
-
CPE
cpe:2.3:*:*:id3lib:3.8.3:*:*:*:*:*:*:*

Other Versions#


Project
Branch
Version
kirkstone
3.8.3
master
3.8.3

Patches#


#
Title
Author
Resolve
1
Patch #1
Matthieu Crapet <Matthieu.Crapet@ingenico.com>

Vulnerabilities#


Name
Analysis
Description
Patched
The RenderV2ToFile function in tag_file.cpp in id3lib (aka libid3) 3.8.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file whose name is constructed from the name of a file being tagged.